> notably Let’s Encrypt which issues 90 days certificates and basically requires automation. Which massively reduces expired cert problems. If you only need to

> notably Let’s Encrypt which issues 90 days certificates and basically requires automation. Which massively reduces expired cert problems. If you only need to do it once a >=year you do it manually and at some point someone forgets / the guy with the calendar reminder leaves... If you have to do it every 2-3 months you automate it with alerts for when it fails.